help with beta antispyware

Hi I installed the microsoft antispyware (beta1) and it has been helpful to
get some of the spyware in my computer however one keeps popping up - EGroup
Dialer. I always remove it from the system but it keeps coming back and it is
always in this path
hkey-currentuser/software/microsoft/systemcertificates/trustedpublisher/certificate/(certificate
number). i dont know much about this..how do i get rid of this...can anyone
help please...thanks a lot. Liz

Unrepper
Wed Aug 03 12:30:03 CDT 2005

Windows ME and XP utilize a restore utility that backs up selected files
automatically to the C:\_Restore folder. This means that an infected file
could be stored there as a backup file, and VirusScan will be unable to
delete these files. You must disable the System Restore Utility to remove the
infected files from the C:\_Restore folder.

http://vil.nai.com/vil/SystemHelpDocs/DisableSysRestore.htm

http://defendingyourmachine.blogspot.com/
--
Don Kendrick



"liza2308" wrote:

> Hi I installed the microsoft antispyware (beta1) and it has been helpful to
> get some of the spyware in my computer however one keeps popping up - EGroup
> Dialer. I always remove it from the system but it keeps coming back and it is
> always in this path
> hkey-currentuser/software/microsoft/systemcertificates/trustedpublisher/certificate/(certificate
> number). i dont know much about this..how do i get rid of this...can anyone
> help please...thanks a lot. Liz

Frank
Wed Aug 03 18:34:06 CDT 2005

"liza2308" <liza2308@discussions.microsoft.com> wrote in message
news:11B918A9-3199-4914-83F9-E36C761ADFA8@microsoft.com
> Hi I installed the microsoft antispyware (beta1) and it has been
> helpful to get some of the spyware in my computer however one keeps
> popping up - EGroup Dialer. I always remove it from the system but
> it keeps coming back and it is always in this path
> hkey-currentuser/software/microsoft/systemcertificates/trustedpublisher/certificate/(certificate
> number). i dont know much about this..how do i get rid of this...can
> anyone help please...thanks a lot. Liz

Run MS Anti-Spyware in Safe Mode.

--
Frank Saunders, MS-MVP, IE/OE
Please respond in Newsgroup only. Do not send email
http://www.fjsmjs.com
Protect your PC
http://www.microsoft.com./athome/security/protect/default.aspx
http://defendingyourmachine.blogspot.com/

liza2308
Tue Aug 09 23:07:48 CDT 2005

thanks a lot..will do that asap and let u know... :-)

"Unrepper" wrote:

> Windows ME and XP utilize a restore utility that backs up selected files
> automatically to the C:\_Restore folder. This means that an infected file
> could be stored there as a backup file, and VirusScan will be unable to
> delete these files. You must disable the System Restore Utility to remove the
> infected files from the C:\_Restore folder.
>
> http://vil.nai.com/vil/SystemHelpDocs/DisableSysRestore.htm
>
> http://defendingyourmachine.blogspot.com/
> --
> Don Kendrick
>
>
>
> "liza2308" wrote:
>
> > Hi I installed the microsoft antispyware (beta1) and it has been helpful to
> > get some of the spyware in my computer however one keeps popping up - EGroup
> > Dialer. I always remove it from the system but it keeps coming back and it is
> > always in this path
> > hkey-currentuser/software/microsoft/systemcertificates/trustedpublisher/certificate/(certificate
> > number). i dont know much about this..how do i get rid of this...can anyone
> > help please...thanks a lot. Liz